What we collect, and what we do with it.
Written in plain English, because a privacy policy you can't read isn't protecting anyone.
Who we are
RubyRoo is a UK consultancy working across apprenticeships, business training, business strategy and marketing. For data protection purposes, the data controller is RUBYROO MARKETING LTD (company number 16104479). If you have any question about this policy or your data, email kim@rubyroo.uk. It goes to Kim, not a shared inbox nobody checks.
What we collect, and why
When you contact us (through the contact form, by email, or by booking a call) we receive your name, your contact details and whatever you choose to tell us. We use it to reply and, if we end up working together, to deliver the work. The lawful basis is our legitimate interest in responding to you, and contract once an engagement starts.
When you complete a scorecard we collect your name, work email, organisation, optional role, answers, score and result. We use them to calculate and email the result, retain a record in the RubyRoo portal and follow up about the issues the scorecard identifies. The lawful basis is our legitimate interest in providing the scorecard and responding to potential enquiries. You acknowledge this use before submitting.
When you browse the site: if (and only if) you accept analytics cookies, Google Analytics tells us which pages get read and roughly where visitors come from. The lawful basis is your consent, which you can withdraw at any time via the Cookie settings link in the footer. If you decline, we get no analytics about your visit at all.
What we don't do: we don't sell your data, we don't run advertising or ad tracking on this site, and we don't add you to a mailing list because you asked us a question.
Cookies and similar storage
The essential items below make the site work and don't track you. The analytics cookies are only set if you accept them.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| rubyroo-consent | Essential (local storage) | Remembers your cookie choice | 12 months |
| rubyroo-a11y | Essential (local storage) | Remembers your accessibility settings (text size, contrast, motion) | Until cleared |
| rubyroo-scorecard-<topic>-v1 | Essential (local storage) | Saves scorecard progress and a submitted result on this device | 30 days |
| _ga | Analytics (cookie, consent only) | Distinguishes visitors for Google Analytics | 2 years |
| _ga_* | Analytics (cookie, consent only) | Maintains the Google Analytics session | 2 years |
We use Google Consent Mode v2: analytics is denied by default and nothing is sent to Google unless you opt in. Advertising signals are switched off permanently, regardless of your choice.
Third parties we use
- Google Analytics 4 (with your consent only): visit statistics. Google may process this data outside the UK; transfers are covered by the UK Addendum to the EU Standard Contractual Clauses under Google's data processing terms.
- Fontshare: our web fonts are currently delivered by Fontshare (Indian Type Foundry), which means your IP address is sent to their servers to load the font files. No cookies are set.
- Cloudflare: hosts and serves the website, and sees the traffic data any host sees (IP addresses, requests) to deliver pages and prevent abuse.
- Pipedrive: stores contact details and enquiries so RubyRoo can manage conversations and follow up. Our website and networking form send submitted details through a server connection. Completed scorecards also send contact details and a result summary; confirmed event bookings send contact details, event dates, quantities and booking totals. These records do not subscribe you to marketing emails.
- Resend: sends scorecard results, booking messages and website emails from the verified rubyroo.uk domain. It processes the recipient address and message content to deliver those emails.
- WhatsApp: the chat button is an outbound link. Nothing loads from WhatsApp on this site; their privacy policy applies only once you choose to open the chat.
How long we keep things
Enquiries: for as long as the conversation is live, then up to 24 months in case you come back. Unfinished scorecard submissions: up to 30 days. Completed scorecard submissions: up to 24 months. Client records: for the engagement plus the period UK tax and accounting law requires (typically 6 years). Analytics: Google Analytics data retention is set to 14 months.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, delete it, restrict what we do with it, object to our use of it, or hand it to you in a portable format. Where we rely on consent, you can withdraw it whenever you like. Email kim@rubyroo.uk and we'll respond within a month.
If you're not happy with how we've handled something, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to fix it first.
Changes to this policy
If we change what we collect or how we use it, this page changes too, with a new date at the top. We won't quietly move the goalposts.